CVE-2021-20245

Katalog CVE

CVSS 5.5 · Medium EPSS 1,2%

Kerentanan Divide By Zero pada imagemagick, redhat enterprise linux +2 lainnya. Skor CVSS 3.1 5.5 (Medium) menurut NVD.

Deskripsi (NVD)

A flaw was found in ImageMagick in coders/webp.c. An attacker who submits a crafted file that is processed by ImageMagick could trigger undefined behavior in the form of math division by zero. The highest threat from this vulnerability is to system availability.

Rincian

Terbit di NVD

9 Maret 2021

Terakhir diubah

17 Juni 2026

Status NVD

Modified

CVSS 3.1

5.5 (Medium), sumber NVD
CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H · uraikan di kalkulator

Jenis kelemahan (CWE)

CWE-369: Divide By Zero

EPSS (30 hari)

1,2% peluang dieksploitasi; lebih tinggi dari 67,6% CVE lain

Produk dan versi terdampak

> Data dari konfigurasi CPE di NVD.

Referensi dan perbaikan

• https://bugzilla.redhat.com/show_bug.cgi?id=1928943 issue tracking · patch · advisory pihak ketiga
• https://github.com/ImageMagick/ImageMagick/issues/3176 issue tracking · patch · advisory pihak ketiga
• https://lists.debian.org/debian-lts-announce/2021/06/msg00000.html mailing list · advisory pihak ketiga
• https://lists.debian.org/debian-lts-announce/2023/05/msg00020.html